Warning: Permanently added '10.128.0.90' (ECDSA) to the list of known hosts. 2020/08/06 11:34:22 fuzzer started 2020/08/06 11:34:22 dialing manager at 10.128.0.105:34051 2020/08/06 11:34:22 syscalls: 3273 2020/08/06 11:34:22 code coverage: enabled 2020/08/06 11:34:22 comparison tracing: enabled 2020/08/06 11:34:22 extra coverage: enabled 2020/08/06 11:34:22 setuid sandbox: enabled 2020/08/06 11:34:22 namespace sandbox: enabled 2020/08/06 11:34:22 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/06 11:34:22 fault injection: enabled 2020/08/06 11:34:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/06 11:34:22 net packet injection: enabled 2020/08/06 11:34:22 net device setup: enabled 2020/08/06 11:34:22 concurrency sanitizer: enabled 2020/08/06 11:34:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/06 11:34:22 USB emulation: enabled 2020/08/06 11:34:22 hci packet injection: enabled 2020/08/06 11:34:23 suppressing KCSAN reports in functions: '__xa_clear_mark' '__ext4_new_inode' 'ext4_writepages' 'generic_write_end' 'blk_mq_sched_dispatch_requests' 'ext4_mark_iloc_dirty' 'futex_wait_queue_me' 'ext4_free_inodes_count' 'blk_mq_dispatch_rq_list' 11:34:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup2(r0, r0) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x1000}) syzkaller login: [ 38.938855][ T8728] IPVS: ftp: loaded support on port[0] = 21 [ 38.998041][ T8728] chnl_net:caif_netlink_parms(): no params data found [ 39.032256][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.039445][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state 11:34:30 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7954244cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc06"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) [ 39.047312][ T8728] device bridge_slave_0 entered promiscuous mode [ 39.055417][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.062866][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.071185][ T8728] device bridge_slave_1 entered promiscuous mode [ 39.086363][ T8728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.098467][ T8728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.116244][ T8728] team0: Port device team_slave_0 added [ 39.123937][ T8728] team0: Port device team_slave_1 added [ 39.137523][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.144499][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.170908][ T8728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.183363][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.190583][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.220050][ T8728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.247912][ T8882] IPVS: ftp: loaded support on port[0] = 21 11:34:30 executing program 2: syz_emit_ethernet(0x1be, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00010b", 0x188, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "011700", 0x0, 0x11, 0x0, @mcast1, @private0, [@fragment, @hopopts={0x0, 0x29, [], [@calipso={0x7, 0x60, {0x0, 0x16, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0x51, "6cd4bf519468989714c30569b0dcf53316a35df5fb66625a7bb20aa888d806432886b90cad98ab50d1febfd26dc0d3d73378ddbf751d249d9890903dca8a6697d387d440d1cae6b91fb8507be446d39ce3"}, @generic={0x0, 0x7f, "7730cc915c6e4001e9434b43bbd640cd28dd254e6c55da0f1c076433542bfd61a66ab50584af9f636042434ea48d8afa5b909ae7b7a76c08605aff2bda3de928be5be2db1813709c0f746c8a0e2b047978549232811604ac2df61170a92baafcafe2b155d85da523def1ad586696896cef7236e4a1e19d80d61c1a036b1c1c"}, @hao={0xc9, 0x10, @mcast2}]}]}}}}}}}, 0x0) [ 39.303224][ T8728] device hsr_slave_0 entered promiscuous mode [ 39.331906][ T8728] device hsr_slave_1 entered promiscuous mode [ 39.420162][ T8894] IPVS: ftp: loaded support on port[0] = 21 [ 39.516064][ T8882] chnl_net:caif_netlink_parms(): no params data found [ 39.578169][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.586645][ T8882] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.594830][ T8882] device bridge_slave_0 entered promiscuous mode [ 39.602092][ T8894] chnl_net:caif_netlink_parms(): no params data found [ 39.610767][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.618091][ T8882] bridge0: port 2(bridge_slave_1) entered disabled state 11:34:30 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0xaaf, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 39.625856][ T8882] device bridge_slave_1 entered promiscuous mode [ 39.632676][ T8728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.683528][ T8728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.738681][ T8882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.754229][ T8728] netdevsim netdevsim0 netdevsim2: renamed from eth2 11:34:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) [ 39.836084][ T9170] IPVS: ftp: loaded support on port[0] = 21 [ 39.842751][ T8882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.868956][ T8728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.930614][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.937738][ T8728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.948530][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.955561][ T8728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.016073][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.023932][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.041584][ T9201] IPVS: ftp: loaded support on port[0] = 21 [ 40.054502][ T8894] bridge0: port 1(bridge_slave_0) entered blocking state 11:34:31 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) [ 40.064784][ T8894] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.074140][ T8894] device bridge_slave_0 entered promiscuous mode [ 40.081295][ T8882] team0: Port device team_slave_0 added [ 40.098654][ T8894] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.107786][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.115639][ T8894] device bridge_slave_1 entered promiscuous mode [ 40.151832][ T8882] team0: Port device team_slave_1 added [ 40.178410][ T9170] chnl_net:caif_netlink_parms(): no params data found [ 40.187940][ T8894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.217473][ T8894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.234198][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.241173][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.267532][ T8882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.279274][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.286227][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.312198][ T8882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.330449][ T8728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.338623][ T8894] team0: Port device team_slave_0 added [ 40.346602][ T8894] team0: Port device team_slave_1 added [ 40.348400][ T9355] IPVS: ftp: loaded support on port[0] = 21 [ 40.377047][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.384847][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.411156][ T8894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.434584][ T8728] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.503051][ T8882] device hsr_slave_0 entered promiscuous mode [ 40.551542][ T8882] device hsr_slave_1 entered promiscuous mode [ 40.591237][ T8882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.598776][ T8882] Cannot create hsr debugfs directory [ 40.604827][ T9201] chnl_net:caif_netlink_parms(): no params data found [ 40.613492][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.620419][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.646352][ T8894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.663208][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.670656][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.722991][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.731871][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.740051][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.747079][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.754793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.763431][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.771765][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.778764][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.786518][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.852449][ T8894] device hsr_slave_0 entered promiscuous mode [ 40.871349][ T8894] device hsr_slave_1 entered promiscuous mode [ 40.911067][ T8894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.918599][ T8894] Cannot create hsr debugfs directory [ 40.934578][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.941912][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.949249][ T9170] device bridge_slave_0 entered promiscuous mode [ 40.956421][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.965357][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.974819][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.983302][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.991657][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.999887][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.008157][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.026574][ T8728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.043812][ T8728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.057744][ T9170] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.065743][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.073624][ T9170] device bridge_slave_1 entered promiscuous mode [ 41.086652][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.094532][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.104006][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.118990][ T9201] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.126840][ T9201] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.134603][ T9201] device bridge_slave_0 entered promiscuous mode [ 41.156354][ T9170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.168433][ T9201] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.176091][ T9201] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.183883][ T9201] device bridge_slave_1 entered promiscuous mode [ 41.196421][ T8882] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.273018][ T9170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.282285][ T9355] chnl_net:caif_netlink_parms(): no params data found [ 41.300882][ T8882] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.335069][ T8882] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.382616][ T8882] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.458609][ T9201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.473836][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.481342][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.489227][ T9170] team0: Port device team_slave_0 added [ 41.497208][ T9170] team0: Port device team_slave_1 added [ 41.508540][ T9201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.538437][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.545581][ T9355] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.553743][ T9355] device bridge_slave_0 entered promiscuous mode [ 41.562412][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.569483][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.577588][ T9355] device bridge_slave_1 entered promiscuous mode [ 41.584522][ T8894] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.619195][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.626609][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.653258][ T9170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.665882][ T8728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.677139][ T8894] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.722301][ T9201] team0: Port device team_slave_0 added [ 41.728254][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.735275][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.761357][ T9170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.778140][ T9201] team0: Port device team_slave_1 added [ 41.784142][ T8894] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.833383][ T9355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.846152][ T8894] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.922290][ T9170] device hsr_slave_0 entered promiscuous mode [ 41.960847][ T9170] device hsr_slave_1 entered promiscuous mode [ 42.000744][ T9170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.008285][ T9170] Cannot create hsr debugfs directory [ 42.015026][ T9355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.050256][ T9201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.057965][ T9201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.084683][ T9201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.101649][ T9201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.108582][ T9201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.135435][ T9201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.147719][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.156464][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.180908][ T9355] team0: Port device team_slave_0 added [ 42.190897][ T9355] team0: Port device team_slave_1 added [ 42.210432][ T8882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.241449][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.258164][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.301692][ T9201] device hsr_slave_0 entered promiscuous mode [ 42.340811][ T9201] device hsr_slave_1 entered promiscuous mode [ 42.392304][ T9201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.399878][ T9201] Cannot create hsr debugfs directory [ 42.411793][ T8728] device veth0_vlan entered promiscuous mode [ 42.429692][ T9170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.472133][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.479660][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.489648][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.497347][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.523972][ T9355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.551050][ T9170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.583112][ T8728] device veth1_vlan entered promiscuous mode [ 42.589729][ T9170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.642203][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.649807][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.676983][ T9355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.687734][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.695805][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.704848][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.719421][ T8894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.728349][ T8882] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.735527][ T9170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.841679][ T9355] device hsr_slave_0 entered promiscuous mode [ 42.880571][ T9355] device hsr_slave_1 entered promiscuous mode [ 42.930336][ T9355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.937881][ T9355] Cannot create hsr debugfs directory [ 42.962054][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.970071][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.979003][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.987534][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.994559][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.002509][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.010933][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.020416][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.027484][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.035084][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.043820][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.052809][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.066752][ T8728] device veth0_macvtap entered promiscuous mode [ 43.082585][ T9201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.121174][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.129563][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.138274][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.146289][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.154034][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.162624][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.171528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.179767][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.188582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.197026][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.205358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.213572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.222589][ T8894] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.231718][ T8728] device veth1_macvtap entered promiscuous mode [ 43.243177][ T9201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.302058][ T9201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.372429][ T9201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.412821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.421214][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.429515][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.436540][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.447553][ T8882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.469313][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.477117][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.485844][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.494209][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.502770][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.511511][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.518532][ T8338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.526338][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.549079][ T8882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.558498][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.570490][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.577858][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.586252][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.595072][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.618995][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.629812][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.639278][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.649134][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.657505][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.667238][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.675965][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.685663][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.694325][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.712919][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.722175][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.733356][ T8728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.744112][ T8728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.752996][ T8728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.761753][ T8728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.779948][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.789525][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.802486][ T8894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.814856][ T8894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.853125][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.861570][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.872420][ T9355] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.932301][ T9355] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.064326][ T8882] device veth0_vlan entered promiscuous mode [ 44.072550][ T9355] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.122713][ T9355] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.163619][ T9201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.170801][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.178739][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.187660][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.195467][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.207541][ T8882] device veth1_vlan entered promiscuous mode [ 44.215663][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.223619][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.232344][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.250499][ T9201] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.260844][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.268346][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.282250][ T9170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.297341][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.305738][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.315647][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.322738][ T8339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.332189][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.340869][ T8894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.354118][ T9170] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.371011][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.378535][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.386265][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.395389][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.403893][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.412377][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.420620][ T3948] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.427621][ T3948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.435397][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.444039][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.461529][ T8882] device veth0_macvtap entered promiscuous mode [ 44.473783][ T8882] device veth1_macvtap entered promiscuous mode [ 44.489045][ T9355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.500215][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.508010][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.515922][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.524631][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.533039][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.540235][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.547835][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.556540][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.564787][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.571806][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.579579][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.588316][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.596861][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.605401][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.619938][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.627635][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.635859][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.644335][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.653077][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.661731][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.670369][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.678403][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.686798][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.695222][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.709816][ T8882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 44.721793][ T8882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.732625][ T8882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.746575][ T9170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.756928][ T9170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.769733][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.777497][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.787197][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.795291][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.803730][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.812298][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.820503][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.828621][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.836720][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.844771][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.852367][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.860248][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.869863][ T8882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 44.881777][ T8882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.892529][ T8882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.900453][ T9355] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.920226][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.930360][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.938877][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.947912][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.956896][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.965717][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.973433][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.981074][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.989394][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.997893][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.004927][ T8338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.012641][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.021216][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.029464][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.036504][ T8338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.046680][ T8882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.059207][ T8882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.069524][ T8882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.078191][ T8882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.103242][ T9170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.123269][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.131980][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.161424][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.186741][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.203021][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.212133][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.219924][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.227352][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 11:34:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup2(r0, r0) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x1000}) 11:34:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup2(r0, r0) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x1000}) [ 45.236199][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.251451][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 11:34:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup2(r0, r0) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x1000}) [ 45.296617][ T9355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.311428][ T9355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.336441][ T9201] 8021q: adding VLAN 0 to HW filter on device batadv0 11:34:36 executing program 0: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5500000019007faf37c083b2a4a280930ae40310000243dc900523693900090035000000010000000800050000000000080000000004d544eeff9a84136ef7b99483de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 45.381611][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.398012][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.408515][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.422140][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.435196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.443546][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.452136][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.460209][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.467918][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.479032][ T8894] device veth0_vlan entered promiscuous mode 11:34:36 executing program 0: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5500000019007faf37c083b2a4a280930ae40310000243dc900523693900090035000000010000000800050000000000080000000004d544eeff9a84136ef7b99483de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 45.541737][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.550752][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.564101][ T9355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.574901][ T8894] device veth1_vlan entered promiscuous mode [ 45.587661][ T9170] device veth0_vlan entered promiscuous mode [ 45.596016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.604498][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.621507][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.629173][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 11:34:36 executing program 0: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5500000019007faf37c083b2a4a280930ae40310000243dc900523693900090035000000010000000800050000000000080000000004d544eeff9a84136ef7b99483de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 45.638529][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.647121][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.654979][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.668264][ T9170] device veth1_vlan entered promiscuous mode [ 45.704638][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.716239][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.724562][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.733476][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.749412][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.757338][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.769601][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.790518][ T9201] device veth0_vlan entered promiscuous mode 11:34:36 executing program 0: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5500000019007faf37c083b2a4a280930ae40310000243dc900523693900090035000000010000000800050000000000080000000004d544eeff9a84136ef7b99483de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 45.808331][ T8894] device veth0_macvtap entered promiscuous mode [ 45.845610][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.855634][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.865351][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.874318][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.884213][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.893239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.901807][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.914425][ T8894] device veth1_macvtap entered promiscuous mode [ 45.928155][ T9355] device veth0_vlan entered promiscuous mode [ 45.940813][ T9170] device veth0_macvtap entered promiscuous mode [ 45.947599][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.957694][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.967715][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.976517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.999735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.008398][ T9201] device veth1_vlan entered promiscuous mode [ 46.017980][ T9170] device veth1_macvtap entered promiscuous mode [ 46.029376][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.037879][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.046308][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.054532][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.062403][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.072215][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.083021][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.092859][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.103350][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.114053][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.132841][ T9355] device veth1_vlan entered promiscuous mode [ 46.141669][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.149772][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.157471][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.166336][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.177946][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.188929][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.199167][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.209918][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.220830][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.236730][ T8894] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.246713][ T8894] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.261358][ T8894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.273465][ T8894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.285857][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.294861][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.303627][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.312560][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.324049][ T9201] device veth0_macvtap entered promiscuous mode [ 46.334126][ T9201] device veth1_macvtap entered promiscuous mode [ 46.382007][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.393336][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.403591][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.414246][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.424298][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.434778][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.445826][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.490310][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.498205][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.507006][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.520393][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.533493][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.543904][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.569290][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.598942][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.609935][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.629703][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 46.665233][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.677694][ T9201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.688076][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.698927][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.710727][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.721398][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.731900][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.742980][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.753665][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.809671][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.818139][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.827374][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.836196][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.844931][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 11:34:37 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7954244cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc06"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) [ 46.853489][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.862527][ T9355] device veth0_macvtap entered promiscuous mode [ 46.875764][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.886356][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.897561][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.928829][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.940785][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.951988][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.968889][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 46.982280][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.994327][ T9201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.010970][ T9355] device veth1_macvtap entered promiscuous mode [ 47.018374][ T9170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.029395][ T9170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.038123][ T9170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.050165][ T9170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.061956][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.071116][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.079208][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.087998][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.099343][ T9201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.108021][ T9201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.123706][ T9201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.135437][ T9201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.156203][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 47.168044][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.178061][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 47.188507][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.188826][ T50] Bluetooth: hci0: command 0x0409 tx timeout [ 47.198832][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 47.214830][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.224764][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 47.235249][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.246260][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 47.256969][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.267937][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.381154][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.390019][ T3948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.400442][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 47.411110][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.421100][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 47.432083][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.441951][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 47.452362][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.462841][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 47.474065][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.483879][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 47.494993][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.505706][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.609947][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.618438][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.630155][ T9355] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.641495][ T9355] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.652878][ T9355] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.664169][ T9355] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 11:34:38 executing program 2: syz_emit_ethernet(0x1be, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00010b", 0x188, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "011700", 0x0, 0x11, 0x0, @mcast1, @private0, [@fragment, @hopopts={0x0, 0x29, [], [@calipso={0x7, 0x60, {0x0, 0x16, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0x51, "6cd4bf519468989714c30569b0dcf53316a35df5fb66625a7bb20aa888d806432886b90cad98ab50d1febfd26dc0d3d73378ddbf751d249d9890903dca8a6697d387d440d1cae6b91fb8507be446d39ce3"}, @generic={0x0, 0x7f, "7730cc915c6e4001e9434b43bbd640cd28dd254e6c55da0f1c076433542bfd61a66ab50584af9f636042434ea48d8afa5b909ae7b7a76c08605aff2bda3de928be5be2db1813709c0f746c8a0e2b047978549232811604ac2df61170a92baafcafe2b155d85da523def1ad586696896cef7236e4a1e19d80d61c1a036b1c1c"}, @hao={0xc9, 0x10, @mcast2}]}]}}}}}}}, 0x0) [ 48.628658][ T50] Bluetooth: hci1: command 0x0409 tx timeout 11:34:39 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0xaaf, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 11:34:39 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x90) 11:34:40 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) 11:34:40 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7954244cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc06"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 11:34:40 executing program 2: syz_emit_ethernet(0x1be, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00010b", 0x188, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "011700", 0x0, 0x11, 0x0, @mcast1, @private0, [@fragment, @hopopts={0x0, 0x29, [], [@calipso={0x7, 0x60, {0x0, 0x16, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0x51, "6cd4bf519468989714c30569b0dcf53316a35df5fb66625a7bb20aa888d806432886b90cad98ab50d1febfd26dc0d3d73378ddbf751d249d9890903dca8a6697d387d440d1cae6b91fb8507be446d39ce3"}, @generic={0x0, 0x7f, "7730cc915c6e4001e9434b43bbd640cd28dd254e6c55da0f1c076433542bfd61a66ab50584af9f636042434ea48d8afa5b909ae7b7a76c08605aff2bda3de928be5be2db1813709c0f746c8a0e2b047978549232811604ac2df61170a92baafcafe2b155d85da523def1ad586696896cef7236e4a1e19d80d61c1a036b1c1c"}, @hao={0xc9, 0x10, @mcast2}]}]}}}}}}}, 0x0) 11:34:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0xaaf, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 11:34:40 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0xaaf, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 11:34:40 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) 11:34:40 executing program 2: syz_emit_ethernet(0x1be, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00010b", 0x188, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "011700", 0x0, 0x11, 0x0, @mcast1, @private0, [@fragment, @hopopts={0x0, 0x29, [], [@calipso={0x7, 0x60, {0x0, 0x16, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0x51, "6cd4bf519468989714c30569b0dcf53316a35df5fb66625a7bb20aa888d806432886b90cad98ab50d1febfd26dc0d3d73378ddbf751d249d9890903dca8a6697d387d440d1cae6b91fb8507be446d39ce3"}, @generic={0x0, 0x7f, "7730cc915c6e4001e9434b43bbd640cd28dd254e6c55da0f1c076433542bfd61a66ab50584af9f636042434ea48d8afa5b909ae7b7a76c08605aff2bda3de928be5be2db1813709c0f746c8a0e2b047978549232811604ac2df61170a92baafcafe2b155d85da523def1ad586696896cef7236e4a1e19d80d61c1a036b1c1c"}, @hao={0xc9, 0x10, @mcast2}]}]}}}}}}}, 0x0) 11:34:40 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x90) 11:34:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7954244cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc06"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="b95b03b700030000009e40f086dd1fff060000000000000177fbac141412e0004301c699da153f08e0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 11:34:40 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) 11:34:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x90) 11:34:40 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) 11:34:40 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0xaaf, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 11:34:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) [ 49.243257][ C0] hrtimer: interrupt took 44327 ns [ 49.269020][ T12] Bluetooth: hci0: command 0x041b tx timeout 11:34:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x90) 11:34:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x90) 11:34:40 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) 11:34:40 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) 11:34:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0xaaf, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 11:34:40 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x90) 11:34:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x90) 11:34:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0xaaf, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 11:34:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) [ 49.911384][ T12] Bluetooth: hci2: command 0x0409 tx timeout 11:34:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 11:34:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:41 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 11:34:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000023000511d25a80648c63940d0724fc60040003400a0002000200000037153e370a00018002000000d1bd", 0x2e}], 0x1}, 0x0) 11:34:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:34:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000080001, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r1 = socket(0x2b, 0x801, 0x7fff) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r2, r3, 0x0, 0x800000bf) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000080)) listen(r1, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f00000000c0)=0x10) 11:34:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) 11:34:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 50.218613][T10228] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 50.233714][T10230] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 11:34:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) [ 50.270963][T10228] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 11:34:41 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 11:34:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000023000511d25a80648c63940d0724fc60040003400a0002000200000037153e370a00018002000000d1bd", 0x2e}], 0x1}, 0x0) 11:34:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) [ 50.415760][T10253] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 50.486449][T10258] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 50.518984][T10253] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 50.708040][ T4773] Bluetooth: hci1: command 0x041b tx timeout 11:34:41 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:34:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) 11:34:41 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x141002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 11:34:41 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000023000511d25a80648c63940d0724fc60040003400a0002000200000037153e370a00018002000000d1bd", 0x2e}], 0x1}, 0x0) [ 50.868161][ T12] Bluetooth: hci3: command 0x0409 tx timeout [ 50.947880][ T4773] Bluetooth: hci4: command 0x0409 tx timeout [ 50.959538][T10281] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 11:34:42 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:42 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x141002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) [ 51.009552][T10281] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 51.027912][ T4773] Bluetooth: hci5: command 0x0409 tx timeout 11:34:42 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000023000511d25a80648c63940d0724fc60040003400a0002000200000037153e370a00018002000000d1bd", 0x2e}], 0x1}, 0x0) 11:34:42 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x141002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) [ 51.161227][T10303] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 51.203219][T10303] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 11:34:42 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x141002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) [ 51.360116][ T4773] Bluetooth: hci0: command 0x040f tx timeout 11:34:42 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:34:42 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x141002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 11:34:42 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:42 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:42 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:42 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x141002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 11:34:43 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) [ 51.998174][ T4773] Bluetooth: hci2: command 0x041b tx timeout 11:34:43 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x141002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) 11:34:43 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:43 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:43 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:43 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 52.788721][ T17] Bluetooth: hci1: command 0x040f tx timeout [ 52.965983][ T12] Bluetooth: hci3: command 0x041b tx timeout [ 53.027596][ T17] Bluetooth: hci4: command 0x041b tx timeout [ 53.119540][ T17] Bluetooth: hci5: command 0x041b tx timeout [ 53.427289][ T4773] Bluetooth: hci0: command 0x0419 tx timeout 11:34:44 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:44 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:44 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:44 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:44 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:44 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) [ 54.077220][ T4773] Bluetooth: hci2: command 0x040f tx timeout 11:34:45 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:45 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:45 executing program 3: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:45 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:45 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) [ 54.819762][T10437] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 54.867998][ T4773] Bluetooth: hci1: command 0x0419 tx timeout [ 54.949454][T10448] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 55.027050][ T12] Bluetooth: hci3: command 0x040f tx timeout 11:34:46 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 55.106969][ T12] Bluetooth: hci4: command 0x040f tx timeout [ 55.187051][ T12] Bluetooth: hci5: command 0x040f tx timeout 11:34:46 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:46 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:46 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:46 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:46 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:46 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x42e, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) fallocate(r0, 0x0, 0x0, 0x3) 11:34:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:46 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:46 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 55.801257][T10499] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:34:46 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 56.146810][ T12] Bluetooth: hci2: command 0x0419 tx timeout 11:34:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000040)=0x24) 11:34:47 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 1: io_setup(0x8, &(0x7f0000000600)=0x0) r1 = fanotify_init(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 11:34:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000040)=0x24) 11:34:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000040)=0x24) 11:34:47 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:47 executing program 1: io_setup(0x8, &(0x7f0000000600)=0x0) r1 = fanotify_init(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 11:34:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000040)=0x24) 11:34:47 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x3a, 0x0}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) 11:34:48 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:48 executing program 1: io_setup(0x8, &(0x7f0000000600)=0x0) r1 = fanotify_init(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 11:34:48 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x3a, 0x0}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) 11:34:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:48 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x3a, 0x0}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) 11:34:48 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x8002}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) lsetxattr(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000280)='\xd3a\xd6\x1aL\x96P.\x9c\xc0\x04\x06\x00\x00\x11M/un\x00X\xb9\x00\xd2\x99a', 0x1a, 0x3) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x81e6c000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x2c}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x36}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11:34:48 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x3a, 0x0}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) [ 57.107944][ T50] Bluetooth: hci3: command 0x0419 tx timeout 11:34:48 executing program 1: io_setup(0x8, &(0x7f0000000600)=0x0) r1 = fanotify_init(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 11:34:48 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x3a, 0x0}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) [ 57.186843][ T50] Bluetooth: hci4: command 0x0419 tx timeout 11:34:48 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x3a, 0x0}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) 11:34:48 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x3a, 0x0}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) [ 57.266641][ T50] Bluetooth: hci5: command 0x0419 tx timeout 11:34:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000040)) 11:34:48 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x3a, 0x0}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) 11:34:48 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:48 executing program 0: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x3a, 0x0}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) 11:34:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000040)) 11:34:48 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6010000a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff56, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd86dac9, 0x0) 11:34:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="8199ee7e00ff010000008107008d0300000000a440f03562e3493c0000000000180000010400000000002b127d3700000000545c4d88107d9792055f000055aa", 0x40, 0x1c0}]) 11:34:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000040)) 11:34:48 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x3a, 0x0}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x7530}, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) 11:34:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0xffffff80, 0x178, 0x2a0, 0x178, 0x380, 0x258, 0x258, 0x380, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x238, 0x2a0, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv4, [], @ipv4=@loopback}, {@ipv4=@multicast2}, {@ipv6=@loopback, [], @ipv6=@empty}, {@ipv6=@empty, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 11:34:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000040)) 11:34:48 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:48 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) [ 57.554243][T10701] xt_policy: output policy not valid in PREROUTING and INPUT [ 57.556817][T10693] Dev loop5: unable to read RDB block 1 [ 57.578431][T10693] loop5: unable to read partition table [ 57.595487][T10693] loop5: partition table beyond EOD, truncated 11:34:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0xffffff80, 0x178, 0x2a0, 0x178, 0x380, 0x258, 0x258, 0x380, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x238, 0x2a0, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv4, [], @ipv4=@loopback}, {@ipv4=@multicast2}, {@ipv6=@loopback, [], @ipv6=@empty}, {@ipv6=@empty, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) [ 57.605167][T10693] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 11:34:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="8199ee7e00ff010000008107008d0300000000a440f03562e3493c0000000000180000010400000000002b127d3700000000545c4d88107d9792055f000055aa", 0x40, 0x1c0}]) 11:34:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0xffffff80, 0x178, 0x2a0, 0x178, 0x380, 0x258, 0x258, 0x380, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x238, 0x2a0, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv4, [], @ipv4=@loopback}, {@ipv4=@multicast2}, {@ipv6=@loopback, [], @ipv6=@empty}, {@ipv6=@empty, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) [ 57.647564][T10712] xt_policy: output policy not valid in PREROUTING and INPUT [ 57.715346][T10722] xt_policy: output policy not valid in PREROUTING and INPUT [ 57.781074][T10725] Dev loop5: unable to read RDB block 1 [ 57.793191][T10725] loop5: unable to read partition table [ 57.800045][T10725] loop5: partition table beyond EOD, truncated [ 57.806382][T10725] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 11:34:51 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6010000a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff56, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd86dac9, 0x0) 11:34:51 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:51 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0xffffff80, 0x178, 0x2a0, 0x178, 0x380, 0x258, 0x258, 0x380, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x238, 0x2a0, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}, @common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv4, [], @ipv4=@loopback}, {@ipv4=@multicast2}, {@ipv6=@loopback, [], @ipv6=@empty}, {@ipv6=@empty, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 11:34:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="8199ee7e00ff010000008107008d0300000000a440f03562e3493c0000000000180000010400000000002b127d3700000000545c4d88107d9792055f000055aa", 0x40, 0x1c0}]) 11:34:51 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6010000a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff56, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd86dac9, 0x0) [ 60.473037][T10745] xt_policy: output policy not valid in PREROUTING and INPUT 11:34:51 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:51 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6010000a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff56, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd86dac9, 0x0) 11:34:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:51 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) [ 60.536404][T10746] Dev loop5: unable to read RDB block 1 [ 60.543220][T10746] loop5: unable to read partition table [ 60.561073][T10746] loop5: partition table beyond EOD, truncated [ 60.591675][T10746] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 11:34:51 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6010000a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff56, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd86dac9, 0x0) 11:34:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6010000a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff56, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd86dac9, 0x0) 11:34:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="8199ee7e00ff010000008107008d0300000000a440f03562e3493c0000000000180000010400000000002b127d3700000000545c4d88107d9792055f000055aa", 0x40, 0x1c0}]) 11:34:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="8199ee7e00ff010000008107008d0300000000a440f03562e3493c0000000000180000010400000000002b127d3700000000545c4d88107d9792055f000055aa", 0x40, 0x1c0}]) 11:34:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:51 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:51 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) [ 60.797672][T10817] Dev loop3: unable to read RDB block 1 [ 60.805472][T10817] loop3: unable to read partition table [ 60.817231][T10817] loop3: partition table beyond EOD, truncated [ 60.827701][T10817] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 60.850642][T10821] Dev loop5: unable to read RDB block 1 [ 60.856283][T10821] loop5: unable to read partition table [ 60.861963][T10821] loop5: partition table beyond EOD, truncated [ 60.869138][T10821] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 11:34:54 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:54 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) 11:34:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="8199ee7e00ff010000008107008d0300000000a440f03562e3493c0000000000180000010400000000002b127d3700000000545c4d88107d9792055f000055aa", 0x40, 0x1c0}]) 11:34:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6010000a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff56, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd86dac9, 0x0) 11:34:54 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="b9800000c035004000000f30d07531f5f50fdb090920e03500004000c4636569b3ce4b50330026660f3881694f0f0f5c193a9af342d8860080000066b82001c4220d2d4f5d2e66420fc73366ba2000ed", 0xfffffffffffffdbf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0x80}, "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", "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"}) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 63.582101][T10855] x_tables: duplicate underflow at hook 2 [ 63.595939][T10855] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 63.657538][T10858] Dev loop3: unable to read RDB block 1 [ 63.669817][T10858] loop3: unable to read partition table 11:34:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6010000a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff56, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd86dac9, 0x0) 11:34:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6010000a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff56, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd86dac9, 0x0) 11:34:54 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000000c0)=""/68, 0xffffffb6, 0x0, 0x0, 0x3}}, 0x48) [ 63.721488][T10858] loop3: partition table beyond EOD, truncated 11:34:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB=','], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 63.762554][T10858] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 11:34:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000062000000b70000000000000095000000000000002c3f2cc2b79542e844cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc0642fa554c348b0278b948a8fc383a5c35db373bb30b1ad819d419dbad"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 11:34:54 executing program 2: ioperm(0x0, 0x5, 0x29) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) 11:34:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="8199ee7e00ff010000008107008d0300000000a440f03562e3493c0000000000180000010400000000002b127d3700000000545c4d88107d9792055f000055aa", 0x40, 0x1c0}]) 11:34:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6010000a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff56, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1400000025000535d25a80648c63940d0424fc60", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000003b40)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xd86dac9, 0x0) 11:34:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB=','], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 63.895271][T10908] x_tables: duplicate underflow at hook 2 [ 64.009450][T10915] Dev loop3: unable to read RDB block 1 [ 64.025665][T10915] loop3: unable to read partition table [ 64.043240][T10915] loop3: partition table beyond EOD, truncated [ 64.049480][T10915] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 11:34:55 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000062000000b70000000000000095000000000000002c3f2cc2b79542e844cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc0642fa554c348b0278b948a8fc383a5c35db373bb30b1ad819d419dbad"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 11:34:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB=','], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) 11:34:55 executing program 2: ioperm(0x0, 0x5, 0x29) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) 11:34:55 executing program 4: getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) [ 64.057790][ T5071] Dev loop3: unable to read RDB block 1 [ 64.063372][ T5071] loop3: unable to read partition table [ 64.069127][ T5071] loop3: partition table beyond EOD, truncated 11:34:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000062000000b70000000000000095000000000000002c3f2cc2b79542e844cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc0642fa554c348b0278b948a8fc383a5c35db373bb30b1ad819d419dbad"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 11:34:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB=','], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8, 'tbf\x00'}, {0x4}}]}, 0x30}}, 0x0) 11:34:55 executing program 2: ioperm(0x0, 0x5, 0x29) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) 11:34:55 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:55 executing program 4: getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) [ 64.178995][T10941] x_tables: duplicate underflow at hook 2 11:34:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000062000000b70000000000000095000000000000002c3f2cc2b79542e844cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc0642fa554c348b0278b948a8fc383a5c35db373bb30b1ad819d419dbad"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 11:34:55 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:55 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:55 executing program 2: ioperm(0x0, 0x5, 0x29) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) 11:34:55 executing program 4: getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 11:34:55 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) [ 64.316598][T10952] x_tables: duplicate underflow at hook 2 [ 64.335420][T10957] x_tables: duplicate underflow at hook 2 [ 64.353642][T10957] blktrace: Concurrent blktraces are not allowed on loop3 11:34:55 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:55 executing program 4: getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) [ 64.397227][T10963] x_tables: duplicate underflow at hook 2 [ 64.412261][T10965] x_tables: duplicate underflow at hook 2 11:34:55 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) [ 64.454017][T10969] x_tables: duplicate underflow at hook 2 11:34:55 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) [ 64.501038][T10963] blktrace: Concurrent blktraces are not allowed on loop3 [ 64.508292][T10969] blktrace: Concurrent blktraces are not allowed on loop3 11:34:55 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:55 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:55 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:55 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) [ 64.548702][T10977] x_tables: duplicate underflow at hook 2 [ 64.558184][T10980] x_tables: duplicate underflow at hook 2 [ 64.577975][T10980] debugfs: File 'dropped' in directory 'loop3' already present! [ 64.587101][T10980] debugfs: File 'msg' in directory 'loop3' already present! [ 64.655307][T10980] debugfs: File 'trace0' in directory 'loop3' already present! [ 64.676187][T10977] debugfs: File 'dropped' in directory 'loop3' already present! [ 64.683831][T10977] debugfs: File 'msg' in directory 'loop3' already present! [ 64.708262][T10977] debugfs: File 'trace0' in directory 'loop3' already present! [ 64.726169][T10988] debugfs: File 'dropped' in directory 'loop3' already present! [ 64.733895][T10988] debugfs: File 'msg' in directory 'loop3' already present! [ 64.757798][T10988] debugfs: File 'trace0' in directory 'loop3' already present! [ 64.765717][T10989] debugfs: File 'dropped' in directory 'loop3' already present! [ 64.778578][T10989] debugfs: File 'msg' in directory 'loop3' already present! [ 64.791447][T10989] debugfs: File 'trace0' in directory 'loop3' already present! [ 64.814328][T10987] debugfs: File 'dropped' in directory 'loop3' already present! [ 64.822511][T10987] debugfs: File 'msg' in directory 'loop3' already present! [ 64.834461][T10987] debugfs: File 'trace0' in directory 'loop3' already present! [ 64.843009][T10992] debugfs: File 'dropped' in directory 'loop3' already present! [ 64.853212][T10992] debugfs: File 'msg' in directory 'loop3' already present! [ 64.863363][T10992] debugfs: File 'trace0' in directory 'loop3' already present! 11:34:55 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:56 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:56 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:56 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:56 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:56 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) [ 64.974452][T11014] debugfs: File 'dropped' in directory 'loop3' already present! [ 65.029005][T11014] debugfs: File 'msg' in directory 'loop3' already present! [ 65.077881][T11014] debugfs: File 'trace0' in directory 'loop3' already present! [ 65.108915][T11026] debugfs: File 'dropped' in directory 'loop3' already present! [ 65.117196][T11026] debugfs: File 'msg' in directory 'loop3' already present! [ 65.127304][T11026] debugfs: File 'trace0' in directory 'loop3' already present! [ 65.137661][T11027] debugfs: File 'dropped' in directory 'loop3' already present! [ 65.153355][T11027] debugfs: File 'msg' in directory 'loop3' already present! [ 65.197975][T11027] debugfs: File 'trace0' in directory 'loop3' already present! [ 65.206743][T11029] debugfs: File 'dropped' in directory 'loop3' already present! [ 65.214392][T11029] debugfs: File 'msg' in directory 'loop3' already present! [ 65.224993][T11029] debugfs: File 'trace0' in directory 'loop3' already present! [ 65.246185][T11025] debugfs: File 'dropped' in directory 'loop3' already present! [ 65.266264][T11025] debugfs: File 'msg' in directory 'loop3' already present! [ 65.278477][T11025] debugfs: File 'trace0' in directory 'loop3' already present! [ 65.286678][T11028] debugfs: File 'dropped' in directory 'loop3' already present! [ 65.294307][T11028] debugfs: File 'msg' in directory 'loop3' already present! [ 65.325331][T11028] debugfs: File 'trace0' in directory 'loop3' already present! 11:34:56 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:56 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mincore(&(0x7f0000005000/0x4000)=nil, 0x4000, &(0x7f0000000a00)=""/4071) 11:34:56 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fff03) r2 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) 11:34:56 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:56 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mincore(&(0x7f0000005000/0x4000)=nil, 0x4000, &(0x7f0000000a00)=""/4071) 11:34:56 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fff03) r2 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) 11:34:56 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:56 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fff03) r2 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) [ 65.548097][T11050] debugfs: File 'dropped' in directory 'loop3' already present! [ 65.565632][T11050] debugfs: File 'msg' in directory 'loop3' already present! [ 65.575060][T11050] debugfs: File 'trace0' in directory 'loop3' already present! 11:34:56 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fff03) r2 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) 11:34:56 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) [ 65.637728][T11062] debugfs: File 'dropped' in directory 'loop3' already present! [ 65.666200][T11062] debugfs: File 'msg' in directory 'loop3' already present! 11:34:56 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mincore(&(0x7f0000005000/0x4000)=nil, 0x4000, &(0x7f0000000a00)=""/4071) 11:34:56 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fff03) r2 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) [ 65.707559][T11062] debugfs: File 'trace0' in directory 'loop3' already present! [ 65.715825][T11064] debugfs: File 'dropped' in directory 'loop3' already present! [ 65.723540][T11064] debugfs: File 'msg' in directory 'loop3' already present! [ 65.754886][T11064] debugfs: File 'trace0' in directory 'loop3' already present! [ 65.770690][T11072] debugfs: File 'dropped' in directory 'loop3' already present! [ 65.781888][T11072] debugfs: File 'msg' in directory 'loop3' already present! 11:34:56 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fff03) r2 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) 11:34:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) 11:34:56 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mincore(&(0x7f0000005000/0x4000)=nil, 0x4000, &(0x7f0000000a00)=""/4071) [ 65.800266][T11072] debugfs: File 'trace0' in directory 'loop3' already present! 11:34:56 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:56 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) move_pages(0x0, 0x20000047, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 11:34:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) 11:34:56 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0x158, 0x98, 0x98, 0x98, 0x98, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @remote, 0x0, 0x0, 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x0, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$inet(0x2, 0xa, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24044080, &(0x7f0000000100)={0x2, 0xfffd, @empty}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0xa0002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9, 0xf22, 0x47}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 11:34:56 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1fff03) r2 = dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) 11:34:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x155, 0x155, 0x2, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @array, @const, @datasec={0x0, 0x9, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}], 'u'}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x172}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 65.948363][T11092] debugfs: File 'dropped' in directory 'loop3' already present! [ 65.973666][T11092] debugfs: File 'msg' in directory 'loop3' already present! [ 65.995418][T11092] debugfs: File 'trace0' in directory 'loop3' already present! [ 66.012294][T11093] debugfs: File 'dropped' in directory 'loop3' already present! [ 66.022235][T11093] debugfs: File 'msg' in directory 'loop3' already present! 11:34:57 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5}]}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 66.045373][T11093] debugfs: File 'trace0' in directory 'loop3' already present! 11:34:57 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) 11:34:57 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001640), 0x4924924924924ff, 0x0) shutdown(r0, 0x1) 11:34:57 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5}]}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 11:34:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) 11:34:57 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001640), 0x4924924924924ff, 0x0) shutdown(r0, 0x1) 11:34:57 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5}]}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 11:35:00 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) move_pages(0x0, 0x20000047, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 11:35:00 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5}]}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 11:35:00 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001640), 0x4924924924924ff, 0x0) shutdown(r0, 0x1) 11:35:00 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) 11:35:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) 11:35:00 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) 11:35:00 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) 11:35:00 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) 11:35:00 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) 11:35:00 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) 11:35:00 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001640), 0x4924924924924ff, 0x0) shutdown(r0, 0x1) 11:35:00 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) [ 71.185979][ T0] NOHZ: local_softirq_pending 08 11:35:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) move_pages(0x0, 0x20000047, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 11:35:02 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) 11:35:02 executing program 5: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) 11:35:02 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) 11:35:02 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001640), 0x4924924924924ff, 0x0) shutdown(r0, 0x1) 11:35:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_LLADDR={0x4}]}, 0x34}}, 0x0) 11:35:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 11:35:02 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) 11:35:02 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r3 = accept(r2, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffd33}}, 0x0) splice(r0, 0x0, r3, 0x0, 0x100000002, 0x0) [ 71.788237][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:35:02 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001640), 0x4924924924924ff, 0x0) shutdown(r0, 0x1) 11:35:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_LLADDR={0x4}]}, 0x34}}, 0x0) 11:35:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x894c, 0x0) [ 71.942279][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:35:05 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00'}}) move_pages(0x0, 0x20000047, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 11:35:05 executing program 3: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1}}], 0x1, 0x0, 0x0) 11:35:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_LLADDR={0x4}]}, 0x34}}, 0x0) 11:35:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x894c, 0x0) 11:35:05 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001640), 0x4924924924924ff, 0x0) shutdown(r0, 0x1) 11:35:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 11:35:05 executing program 3: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1}}], 0x1, 0x0, 0x0) 11:35:05 executing program 3: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1}}], 0x1, 0x0, 0x0) 11:35:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x894c, 0x0) [ 74.162073][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:35:05 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1}}], 0x1, 0x0, 0x0) 11:35:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_LLADDR={0x4}]}, 0x34}}, 0x0) 11:35:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x894c, 0x0) [ 74.329275][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 11:35:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 11:35:07 executing program 3: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1}}], 0x1, 0x0, 0x0) 11:35:07 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1}}], 0x1, 0x0, 0x0) 11:35:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 11:35:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 11:35:07 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000540)) 11:35:07 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000540)) 11:35:07 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1}}], 0x1, 0x0, 0x0) 11:35:07 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x9effffff, &(0x7f0000000080)=[{&(0x7f0000000100)="230000002000ffae00060c00000f020081000000fe018708546fabca07007d06a40000", 0x23}], 0x1}, 0x0) 11:35:07 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000540)) 11:35:07 executing program 0: unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:35:07 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x9effffff, &(0x7f0000000080)=[{&(0x7f0000000100)="230000002000ffae00060c00000f020081000000fe018708546fabca07007d06a40000", 0x23}], 0x1}, 0x0) 11:35:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 11:35:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000540)) 11:35:08 executing program 0: unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:35:08 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x9effffff, &(0x7f0000000080)=[{&(0x7f0000000100)="230000002000ffae00060c00000f020081000000fe018708546fabca07007d06a40000", 0x23}], 0x1}, 0x0) 11:35:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 11:35:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 11:35:08 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x9effffff, &(0x7f0000000080)=[{&(0x7f0000000100)="230000002000ffae00060c00000f020081000000fe018708546fabca07007d06a40000", 0x23}], 0x1}, 0x0) 11:35:08 executing program 4: unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:35:08 executing program 0: unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:35:08 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:08 executing program 4: unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:35:08 executing program 0: unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) [ 77.694878][ T17] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.054909][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.066160][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.076668][ T17] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.086095][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.099595][ T17] usb 4-1: config 0 descriptor?? 11:35:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) 11:35:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea400002b000505d25a80648c63940d0124fc6010000a400a000048053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) 11:35:09 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 11:35:09 executing program 4: unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11:35:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffc47, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = dup2(r0, r0) write$binfmt_script(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) r2 = gettid() tkill(r2, 0x1000000000016) [ 78.190817][T11391] IPVS: ftp: loaded support on port[0] = 21 11:35:09 executing program 4: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, 0x0, 0x0, 0x0) [ 78.237199][T11400] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 78.249385][T11400] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.5'. 11:35:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea400002b000505d25a80648c63940d0124fc6010000a400a000048053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) 11:35:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea400002b000505d25a80648c63940d0124fc6010000a400a000048053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) [ 78.367177][T11436] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 78.385078][T11436] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.5'. 11:35:09 executing program 4: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, 0x0, 0x0, 0x0) [ 78.462166][T11391] IPVS: ftp: loaded support on port[0] = 21 [ 78.495924][T11443] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 78.510646][T11443] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.5'. [ 78.556320][T11350] udc-core: couldn't find an available UDC or it's busy [ 78.563280][T11350] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.704871][ T3311] tipc: TX() has been purged, node left! [ 78.875206][ T17] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 78.884696][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0001/input/input5 [ 78.982102][ T17] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 79.077863][ T17] usb 4-1: USB disconnect, device number 2 [ 79.914876][ T3948] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.964812][ T3311] tipc: TX() has been purged, node left! [ 80.274807][ T3948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.285713][ T3948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.296416][ T3948] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 80.306029][ T3948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.317905][ T3948] usb 4-1: config 0 descriptor?? 11:35:11 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 11:35:11 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea400002b000505d25a80648c63940d0124fc6010000a400a000048053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) 11:35:11 executing program 4: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, 0x0, 0x0, 0x0) 11:35:11 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 11:35:11 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 11:35:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) [ 80.493016][T11527] IPVS: ftp: loaded support on port[0] = 21 [ 80.510627][T11528] IPVS: ftp: loaded support on port[0] = 21 [ 80.520379][T11532] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 80.530099][T11531] IPVS: ftp: loaded support on port[0] = 21 [ 80.549818][T11532] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.5'. [ 80.560174][ T3948] usbhid 4-1:0.0: can't add hid device: -71 [ 80.566489][ T3948] usbhid: probe of 4-1:0.0 failed with error -71 [ 80.611552][ T3948] usb 4-1: USB disconnect, device number 3 11:35:11 executing program 4: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, 0x0, 0x0, 0x0) 11:35:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="0042c9b271aa91030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b12a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450ee800000002e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f63668a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac50000000000"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:11 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:12 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) [ 81.014643][ T17] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 81.022349][ T3948] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.078360][T11623] IPVS: ftp: loaded support on port[0] = 21 11:35:12 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 11:35:12 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) [ 81.184593][ T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.228133][T11649] IPVS: ftp: loaded support on port[0] = 21 [ 81.246987][T11651] IPVS: ftp: loaded support on port[0] = 21 [ 81.394915][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.406339][ T3948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.422712][ T3948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.434364][ T17] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.452128][ T17] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.465922][ T3948] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.485040][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.493109][ T3948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.518976][ T17] usb 6-1: config 0 descriptor?? [ 81.530778][ T3948] usb 4-1: config 0 descriptor?? 11:35:12 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) [ 81.592611][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.624655][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.636883][T11707] IPVS: ftp: loaded support on port[0] = 21 [ 81.652237][ T50] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.681150][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.689675][ T3311] tipc: TX() has been purged, node left! [ 81.722379][ T50] usb 5-1: config 0 descriptor?? 11:35:12 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 11:35:12 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) [ 81.831158][T11738] IPVS: ftp: loaded support on port[0] = 21 [ 81.833842][T11739] IPVS: ftp: loaded support on port[0] = 21 [ 81.884394][ T3311] tipc: TX() has been purged, node left! [ 81.892266][ T3311] tipc: TX() has been purged, node left! [ 82.007642][T11608] udc-core: couldn't find an available UDC or it's busy [ 82.034391][T11608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 11:35:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="0042c9b271aa91030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b12a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450ee800000002e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f63668a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac50000000000"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) [ 82.054355][ T3311] tipc: TX() has been purged, node left! [ 82.054885][T11529] udc-core: couldn't find an available UDC or it's busy [ 82.094360][T11529] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 11:35:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) [ 82.226103][T11617] udc-core: couldn't find an available UDC or it's busy [ 82.233057][T11617] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.366178][ T17] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 82.388414][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0002/input/input6 [ 82.424750][ T3948] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 82.439961][ T3948] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input7 [ 82.451731][ T9202] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.497191][ T17] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 82.544711][ T50] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 82.577368][ T3948] keytouch 0003:0926:3333.0003: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 82.587981][ T50] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0004/input/input8 [ 82.614308][T11647] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.652265][ T3948] usb 4-1: USB disconnect, device number 4 [ 82.698554][T11818] usb 6-1: USB disconnect, device number 2 [ 82.770003][ T50] keytouch 0003:0926:3333.0004: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 82.802389][ T50] usb 5-1: USB disconnect, device number 2 [ 82.834300][ T9202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.863889][ T9202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.883791][ T9202] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 82.904461][ T9202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.919543][ T9202] usb 1-1: config 0 descriptor?? [ 82.996184][T11647] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.007125][T11647] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.020507][T11647] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 83.030182][T11647] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.040757][T11647] usb 2-1: config 0 descriptor?? 11:35:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:14 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="0042c9b271aa91030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b12a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450ee800000002e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f63668a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac50000000000"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="0042c9b271aa91030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b12a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450ee800000002e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f63668a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac50000000000"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) [ 83.386949][T11786] udc-core: couldn't find an available UDC or it's busy [ 83.393905][T11786] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.515501][ T8338] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 83.515703][T11792] udc-core: couldn't find an available UDC or it's busy [ 83.529972][T11818] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.531112][T11792] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.544091][T11914] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 83.704049][ T4773] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.724892][ T9202] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 83.743340][ T9202] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input9 [ 83.832785][ T9202] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 83.866444][T11647] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 83.898957][T11647] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input10 [ 83.910736][T11818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.923123][T11914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.937766][ T9202] usb 1-1: USB disconnect, device number 2 [ 83.951315][T11914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.963661][T11818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.974000][ T8338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.982310][T11914] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 83.996541][T11818] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.001773][ T8338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.006224][T11818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.025531][T11914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.029977][ T8338] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.035930][T11818] usb 3-1: config 0 descriptor?? [ 84.045364][ T3311] tipc: TX() has been purged, node left! [ 84.054396][T11914] usb 4-1: config 0 descriptor?? [ 84.087496][ T8338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.114376][ T4773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.117081][ T8338] usb 6-1: config 0 descriptor?? [ 84.151374][ T4773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.162147][ T4773] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.176287][T11647] keytouch 0003:0926:3333.0006: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 84.183960][ T3311] tipc: TX() has been purged, node left! [ 84.240085][T11647] usb 2-1: USB disconnect, device number 2 [ 84.245970][ T4773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.264680][ T4773] usb 5-1: config 0 descriptor?? [ 84.324253][ T3311] tipc: TX() has been purged, node left! 11:35:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) [ 84.463921][ T3311] tipc: TX() has been purged, node left! [ 84.521550][T11935] udc-core: couldn't find an available UDC or it's busy [ 84.528713][T11935] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.546864][T11932] udc-core: couldn't find an available UDC or it's busy [ 84.553812][T11932] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.596380][T11931] udc-core: couldn't find an available UDC or it's busy [ 84.603376][T11931] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.623917][ T3311] tipc: TX() has been purged, node left! 11:35:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="0042c9b271aa91030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b12a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450ee800000002e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f63668a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac50000000000"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) [ 84.730113][T11942] udc-core: couldn't find an available UDC or it's busy [ 84.737297][T11942] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.823901][T11948] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.854318][T11914] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 84.863735][T11914] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input11 [ 84.875724][T11818] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 84.904069][T11818] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input12 [ 84.944338][ T8338] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 84.960383][ T8338] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0009/input/input13 [ 84.995102][T11914] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 85.035558][ T4773] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 85.053787][T11947] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.060849][ T4773] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input14 [ 85.080650][T11818] keytouch 0003:0926:3333.0008: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 85.140094][T11949] usb 4-1: USB disconnect, device number 5 [ 85.147846][ T8338] keytouch 0003:0926:3333.0009: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 85.149125][T11818] usb 3-1: USB disconnect, device number 2 [ 85.235852][T11948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.251864][ T8338] usb 6-1: USB disconnect, device number 3 [ 85.294700][T11948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.347877][T11948] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.371362][T11948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.375187][ T4773] keytouch 0003:0926:3333.000A: input,hidraw3: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 85.439711][T11948] usb 1-1: config 0 descriptor?? [ 85.454117][T11947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.472652][T11947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.488761][ T4773] usb 5-1: USB disconnect, device number 3 [ 85.521559][T11947] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.545980][T11947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.560957][T11947] usb 2-1: config 0 descriptor?? 11:35:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:16 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:16 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) [ 85.947276][T12048] udc-core: couldn't find an available UDC or it's busy [ 85.955939][T12048] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.015115][T11950] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.023634][T11818] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 86.038420][T12054] udc-core: couldn't find an available UDC or it's busy [ 86.047593][T12054] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.143587][ T8338] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.273615][ T9202] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.284234][T11948] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 86.301262][T11948] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000B/input/input15 [ 86.354068][T11947] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 86.366665][T11947] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000C/input/input16 [ 86.395010][T11818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.401165][T11948] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 86.433955][T11950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.443557][T11818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.446742][T11950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.474360][T11950] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.499743][T11947] keytouch 0003:0926:3333.000C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 86.514354][T11950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.531095][T11950] usb 3-1: config 0 descriptor?? [ 86.533823][T11818] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.564063][ T8338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.586088][ T8338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.620450][ T8338] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.625221][T11818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.643814][ T9202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.650447][ T8338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.676669][ T9202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.685016][ T8338] usb 6-1: config 0 descriptor?? [ 86.699434][T11947] usb 2-1: USB disconnect, device number 3 [ 86.715840][T11818] usb 4-1: config 0 descriptor?? [ 86.728356][ T9202] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.742801][ T9202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.770836][T12230] usb 1-1: USB disconnect, device number 3 [ 86.777236][ T9202] usb 5-1: config 0 descriptor?? [ 87.017609][T12209] udc-core: couldn't find an available UDC or it's busy [ 87.024824][T12209] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 11:35:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810300000000003cf57187b312525b631dda1ea9b142bd891381f1343366ade89a08e1cf0f98b5ef41723da4a9166d9587c13a27b926deaedfc0e23540aa2a491d0041c82c1cef6b12b15b8ebb95144b567cc87d36c55c6f74ee455f0f16bee8885271686a58a13ecf239365a8d86391a25ea859d07bf8ae8d27bbeb4858431b95a08406c74bb0603bf8a56ab62c448e925fe31569b9611da91b0c4276ca64e90781a2a1703ac2f8a285d9fb645e9937824ed2c6690971ea801f840920a87e5ebebed4e972d8b98666bcaf88424b834db21281a7be5ebe3c6063381d34877d8f1b0ef4267b16c536a3f9aa577cc9953ca2048ca44d1baaff811ec5b965b92f04553fb17d2b1546ef30e4413de6c57aa334d2948f1189aef576773dec278c51fb0c4483db3387d09415f654f31ab1b20fd95df5a8031340f6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="0042c9b271aa91030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b12a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450ee800000002e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f63668a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac50000000000"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) [ 87.185719][T12217] udc-core: couldn't find an available UDC or it's busy [ 87.189945][T12212] udc-core: couldn't find an available UDC or it's busy [ 87.192667][T12217] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.199951][T12212] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 11:35:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) [ 87.237980][T12223] udc-core: couldn't find an available UDC or it's busy [ 87.260780][T12223] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.353876][T11950] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 87.369376][T11950] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000D/input/input17 [ 87.462755][T11950] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 87.514599][T11818] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 87.528416][T11818] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000E/input/input18 [ 87.540580][ T9202] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 87.549069][T12230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.582384][ T9202] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000F/input/input19 [ 87.603839][ T8338] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 87.613401][T11947] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.617944][ T17] usb 3-1: USB disconnect, device number 3 [ 87.655876][ T8338] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0010/input/input20 [ 87.680803][T11818] keytouch 0003:0926:3333.000E: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 87.749247][ T9202] keytouch 0003:0926:3333.000F: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 87.791924][T11948] usb 4-1: USB disconnect, device number 6 [ 87.819250][ T9202] usb 5-1: USB disconnect, device number 4 [ 87.934596][T12230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.945596][T12230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.956249][T12230] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.965619][T12230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.974213][ T8338] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 88.000604][T12230] usb 1-1: config 0 descriptor?? [ 88.015363][T11947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.029936][ T8338] usb 6-1: USB disconnect, device number 4 [ 88.055176][T11947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.098587][T11947] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 88.139816][T11947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 11:35:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="0042c9b271aa91030400000204030a08b5f4dff5abf62516eefff03b833aaa9a42d8867ada37523214452bbee48a8a4d9667d7fed8e8861b12a47306fb6bcdaf49e1b5639c28c347f81e8fec9b9e5e0adae6664083da44404259382a14f5521d78ff7450ee800000002e5f03f829f560da68281354432a40e6b19e9fd8a6fdb13d66f91b58b8563c2cc4e5438d1e3c61487fd4eb83c5db960ac76404b1e962bd616962af6c335d15d0ad947a2321bf0bfa15f63668a6354a95267eb37d4e60d625405870bcd52fea4a7c1f4b67be28add47f384793e16201ee7d616e30a637f81cf50ca924959d5782e6ca9e83972cb688ef0f92931041ffaf636beb6a44cac50000000000"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) [ 88.153430][T11947] usb 2-1: config 0 descriptor?? 11:35:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:19 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, 0x0, 0x0, 0x0) [ 88.484806][T12328] udc-core: couldn't find an available UDC or it's busy [ 88.491869][T12328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.513209][T11950] usb 3-1: new high-speed USB device number 4 using dummy_hcd 11:35:19 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, 0x0, 0x0, 0x0) [ 88.614785][T12335] udc-core: couldn't find an available UDC or it's busy [ 88.624593][T12335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 11:35:19 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, 0x0, 0x0, 0x0) [ 88.703187][T11948] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 88.713515][ T9202] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.783660][T12230] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 88.795480][T12230] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0011/input/input21 11:35:19 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, 0x0, 0x0, 0x0) [ 88.885563][T12230] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 11:35:20 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, 0x0, 0x0, 0x0) [ 88.935436][T11947] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 88.944378][T11950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.971685][T11947] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0012/input/input22 [ 88.992477][T11950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.005445][T11950] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.016793][T11950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.027092][T11950] usb 3-1: config 0 descriptor?? [ 89.049461][ T17] usb 1-1: USB disconnect, device number 4 [ 89.073549][ T9202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.088940][ T9202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.099865][T11947] keytouch 0003:0926:3333.0012: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 89.104856][ T9202] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.135391][T11948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 11:35:20 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x3, 0x0, 0x0, 0x0) [ 89.165066][T11948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.215705][T11948] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.237172][T11948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.239375][ T9202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.257005][T11948] usb 4-1: config 0 descriptor?? [ 89.277612][T11947] usb 2-1: USB disconnect, device number 4 [ 89.294630][ T9202] usb 5-1: config 0 descriptor?? 11:35:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) [ 89.491216][T12478] udc-core: couldn't find an available UDC or it's busy [ 89.498385][T12478] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 11:35:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) [ 89.744704][T12510] udc-core: couldn't find an available UDC or it's busy [ 89.751661][T12510] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 89.754402][T12504] udc-core: couldn't find an available UDC or it's busy [ 89.767030][T12504] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 11:35:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) [ 89.823516][T11950] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 89.839491][T11950] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0013/input/input23 [ 89.934281][T11950] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 90.033523][ T9202] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 90.057553][ T9202] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input24 [ 90.070778][T11916] usb 3-1: USB disconnect, device number 4 [ 90.073365][T11948] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 90.104523][T11948] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0015/input/input25 [ 90.137412][ T9202] keytouch 0003:0926:3333.0014: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 90.305169][ T8339] usb 5-1: USB disconnect, device number 5 [ 90.347084][T11948] keytouch 0003:0926:3333.0015: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 90.391723][T11948] usb 4-1: USB disconnect, device number 7 11:35:21 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 11:35:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "fc7100269712596c1c0d58c245f9288bf191c1b2d9e0ad034268fecdcd70b64ed4c6e89a0258cbcf833bc1eb865d68be278f5a18754ff7313cb371def95e6e05f55fde7aaba59e06c4ccd15f53687551e509ff69fd40908a2437f4a01d300b0171b3ef07ee7433422f93afd890907707b2ccd358604b5cb1dd095847ec110bf1d9fbef1e51fbfccd883518ea849192df942e366f1734ddbd5fa67f1bad262fcb31ec227d1313a3ac61cc0e65f9d337948af511b90d0aa49321e1074cd4f2cfc548e655c9124ac2d67a2b54313bb70e93004f738d08844f6bf03b6b947f7ef616e0df9fb68800c72b7626d7f77c9c201f68828e4e178116b05ff954440c8db0d7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 11:35:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, "59d456aa"}]}]}, 0x24}}, 0x0) 11:35:21 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:35:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 11:35:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 11:35:21 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 90.933365][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:35:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 11:35:22 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 90.987780][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:35:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 11:35:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, "59d456aa"}]}]}, 0x24}}, 0x0) [ 91.118813][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.185268][T11948] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 91.232803][T11916] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 91.553150][T11948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.564030][T11948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.574341][T11948] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.584026][T11948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.594226][T11948] usb 5-1: config 0 descriptor?? [ 91.632708][T11916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.652326][T11916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.663303][T11916] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.673124][T11916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.685652][T11916] usb 4-1: config 0 descriptor?? [ 92.064130][T12773] udc-core: couldn't find an available UDC or it's busy [ 92.071082][T12773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 92.154042][T12784] udc-core: couldn't find an available UDC or it's busy [ 92.161050][T12784] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 92.383376][T11948] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 92.393989][T11948] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0016/input/input26 [ 92.473844][T11948] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 92.493003][T11916] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 92.502471][T11916] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0017/input/input27 [ 92.595177][ T17] usb 5-1: USB disconnect, device number 6 [ 92.638450][T11916] keytouch 0003:0926:3333.0017: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 92.795036][T11916] usb 4-1: USB disconnect, device number 8 11:35:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:24 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120180006ff94610b4070a010201002000010902240001000000000904000020a6db5d000905091e000000000009058f02"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000a00)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40002e0000002e052648f7be319be28e381acfa4ed14d886bd69866bdab65e5d4260d683e10a03c20500549605033c8ef9b6510e"], &(0x7f00000003c0)=ANY=[@ANYBLOB="0004f7ffffff23037448"], &(0x7f0000000400)=ANY=[@ANYBLOB="000f19000000050f19000114100aff22ffffff07f00200f0c00000c000fe01"], &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x4, 0x20, 0x7f, "a8f00b0e", "8d6cce96"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3c, 0x60, 0x9, 0x9, 0x4, 0x1, 0x80}}}, &(0x7f0000001140)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0x43, "41082703e8d941ac22cbfda04961b3e4e10f3b75c60abe7dab885d357220bc0ed80dcce7f9c4cc575c0f12af544eb3a3acc81c9d707b0e5148a33dee5b0db3d44bf88f"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x1, 0x3bccb8eb94ad91df}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2, 0x20}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0xfffc}, &(0x7f0000000ec0)={0x40, 0x9, 0x1}, &(0x7f0000000f00)={0x40, 0xb, 0x2, "fa46"}, &(0x7f0000000f40)={0x40, 0xf, 0x2}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001000)={0x40, 0x19, 0x2, 'X6'}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001080)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000010c0)={0x40, 0x1e, 0x1}, &(0x7f0000001100)={0x40, 0x21, 0x1, 0xda}}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001d80)=""/4096) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0024d8000000d83c6ece823271bd5534a4d1f9dc138b49ac18471f3b506f5ebdcb296eb806c58a67fac7b10b2e01b4101b771d62d1942cac85a5310f63dcbcb3fd6118142f72dede971d5a0f77aafc97cb73cad30e894fe35b93c9fda74b54f99a2b80aea646c49ae46d6863df1af456000273471859e1f6185b306e69e04c7df5187fe01916968cb951024219f3eb0c98d17a52fa6fbb2c73897216710287e751d017914c9de6f36ffa5612541029882b360482dd183acf30f12ddd92127c1cacfab77ef983b9ff8133677fc1a8c6dbee8ba7e43af17b"], &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=ANY=[@ANYBLOB="a39f66d600"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x2, 0xc, "8a002b88", "d7ab0197"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x8, 0x4, 0xc3, 0x5, 0x46}}}, &(0x7f0000000940)={0x84, &(0x7f0000000ac0)={0x0, 0x13, 0x100, "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"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xf0}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x40, 0x80}}, &(0x7f00000000c0)={0x40, 0x7, 0x2, 0x995}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ddc0"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000780)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="389b94f043cd"}, &(0x7f0000000800)={0x40, 0x19, 0x2, '_v'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x4002}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xdb}}) r3 = syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x0, 0x41) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, 0x0) 11:35:24 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:35:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r2) sendmmsg(r1, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) 11:35:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 11:35:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, "59d456aa"}]}]}, 0x24}}, 0x0) 11:35:24 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:35:24 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 93.436410][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.442436][T11916] usb 5-1: new high-speed USB device number 7 using dummy_hcd 11:35:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, "59d456aa"}]}]}, 0x24}}, 0x0) 11:35:24 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x12, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 11:35:24 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:35:24 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 93.560415][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.683775][ T17] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 93.812389][T11916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.823284][T11916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.833687][T11916] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.843070][T11916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.855215][T11916] usb 5-1: config 0 descriptor?? [ 94.042367][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.054506][ T17] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.064462][ T17] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.073811][ T17] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.084842][ T17] usb 4-1: config 0 descriptor?? [ 94.313875][T12906] udc-core: couldn't find an available UDC or it's busy [ 94.320815][T12906] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.543889][T12918] udc-core: couldn't find an available UDC or it's busy [ 94.550888][T12918] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.632634][T11916] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 94.642684][T11916] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0018/input/input28 [ 94.731134][T11916] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 94.842746][ T17] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 94.848459][T11950] usb 5-1: USB disconnect, device number 7 [ 94.861820][ T17] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0019/input/input29 [ 94.947340][ T17] keytouch 0003:0926:3333.0019: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 95.077371][T11948] usb 4-1: USB disconnect, device number 9 11:35:26 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x12, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 11:35:26 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x12, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 11:35:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 11:35:26 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:35:26 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:35:26 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x12, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 11:35:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x60}}}, 0xb8}}, 0x0) 11:35:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x60}}}, 0xb8}}, 0x0) 11:35:26 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x800000000009031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) msync(&(0x7f000051d000/0x2000)=nil, 0x2000, 0x6) open(0x0, 0x0, 0x0) 11:35:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800b00010067656e657665000049000280050004000400000005000300070000000400060005000300050000001400070000000000000000000000ffffac1414aa060005004e230000050008"], 0x7c}}, 0x0) [ 95.707410][ T29] audit: type=1800 audit(1596713726.717:2): pid=13051 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 11:35:26 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x12, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) 11:35:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x60}}}, 0xb8}}, 0x0) 11:35:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 11:35:26 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x12, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) [ 95.765799][ T29] audit: type=1800 audit(1596713726.747:3): pid=13051 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 [ 95.804823][T13063] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 11:35:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800b00010067656e657665000049000280050004000400000005000300070000000400060005000300050000001400070000000000000000000000ffffac1414aa060005004e230000050008"], 0x7c}}, 0x0) 11:35:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x60}}}, 0xb8}}, 0x0) 11:35:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800b00010067656e657665000049000280050004000400000005000300070000000400060005000300050000001400070000000000000000000000ffffac1414aa060005004e230000050008"], 0x7c}}, 0x0) [ 95.876528][T13075] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 11:35:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 11:35:26 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 95.923363][ T29] audit: type=1800 audit(1596713726.877:4): pid=13072 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 11:35:27 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3000009, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x12, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup2(r4, r3) dup3(r5, r2, 0x0) [ 95.973471][T13084] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.014138][ T29] audit: type=1800 audit(1596713727.027:5): pid=13083 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 [ 96.042555][ T29] audit: type=1800 audit(1596713727.027:6): pid=13085 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 11:35:27 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x800000000009031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) msync(&(0x7f000051d000/0x2000)=nil, 0x2000, 0x6) open(0x0, 0x0, 0x0) 11:35:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85513, &(0x7f00000002c0)={{0x0, 0x0, 0x2, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 11:35:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800b00010067656e657665000049000280050004000400000005000300070000000400060005000300050000001400070000000000000000000000ffffac1414aa060005004e230000050008"], 0x7c}}, 0x0) 11:35:27 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 11:35:27 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 11:35:27 executing program 4: unshare(0x20000400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc080661a, 0x0) 11:35:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85513, &(0x7f00000002c0)={{0x0, 0x0, 0x2, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 11:35:27 executing program 4: unshare(0x20000400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc080661a, 0x0) [ 96.445556][T13108] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.488667][ T29] audit: type=1800 audit(1596713727.497:7): pid=13111 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 11:35:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85513, &(0x7f00000002c0)={{0x0, 0x0, 0x2, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 11:35:27 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 11:35:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85513, &(0x7f00000002c0)={{0x0, 0x0, 0x2, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 11:35:27 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x800000000009031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) msync(&(0x7f000051d000/0x2000)=nil, 0x2000, 0x6) open(0x0, 0x0, 0x0) [ 96.549225][ T29] audit: type=1800 audit(1596713727.527:8): pid=13113 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 [ 96.647011][ T29] audit: type=1800 audit(1596713727.647:9): pid=13125 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 11:35:27 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x800000000009031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) msync(&(0x7f000051d000/0x2000)=nil, 0x2000, 0x6) open(0x0, 0x0, 0x0) 11:35:27 executing program 4: unshare(0x20000400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc080661a, 0x0) 11:35:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85513, &(0x7f00000002c0)={{0x0, 0x0, 0x2, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 11:35:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85513, &(0x7f00000002c0)={{0x0, 0x0, 0x2, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 11:35:27 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x800000000009031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) msync(&(0x7f000051d000/0x2000)=nil, 0x2000, 0x6) open(0x0, 0x0, 0x0) 11:35:28 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85513, &(0x7f00000002c0)={{0x0, 0x0, 0x2, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 11:35:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x130, 0x88020000, 0x340, 0x130, 0x450, 0x220, 0x220, 0x450, 0x220, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x320, 0x340, 0x0, {}, [@common=@unspec=@comment={{0x120, 'comment\x00'}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond0\x00', {0x0, 0x0, 0x5a, 0x0, 0x0, 0x81, 0x40}}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 11:35:28 executing program 4: unshare(0x20000400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc080661a, 0x0) [ 97.048501][T13152] xt_hashlimit: invalid rate [ 97.072216][T13154] xt_hashlimit: invalid rate 11:35:28 executing program 1: ioperm(0x0, 0x3fc, 0xa) rseq(0x0, 0xffffffffffffffe9, 0xffffffffffffffff, 0x0) 11:35:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x130, 0x88020000, 0x340, 0x130, 0x450, 0x220, 0x220, 0x450, 0x220, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x320, 0x340, 0x0, {}, [@common=@unspec=@comment={{0x120, 'comment\x00'}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond0\x00', {0x0, 0x0, 0x5a, 0x0, 0x0, 0x81, 0x40}}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 11:35:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x6, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000e7ffffff851000000300000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000095000000000000009500003f000000000000045300094d5e3690e9a652125c3512eda0ba6704cc8cda606cc86a07f964db1b74afaed2946005a7516f35d83bdc9d8a9a3f39d206f4620cb4619b39124d883d35dfefbee97fc2a674f09682e00400f3f4c81b03a7d24fc5d11f61cb"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x2) 11:35:28 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x800000000009031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) msync(&(0x7f000051d000/0x2000)=nil, 0x2000, 0x6) open(0x0, 0x0, 0x0) [ 97.201254][T13166] xt_hashlimit: invalid rate [ 97.551438][T13165] ================================================================== [ 97.559543][T13165] BUG: KCSAN: data-race in page_counter_charge / page_counter_charge [ 97.567581][T13165] [ 97.569901][T13165] write to 0xffff88821b673158 of 8 bytes by task 13146 on cpu 0: [ 97.577612][T13165] page_counter_charge+0x221/0x270 [ 97.582717][T13165] mem_cgroup_migrate+0x74/0x290 [ 97.587646][T13165] migrate_page_states+0x64c/0x730 [ 97.592743][T13165] migrate_page_copy+0x1b2/0x560 [ 97.597672][T13165] migrate_page+0xc2/0xf0 [ 97.601987][T13165] move_to_new_page+0xa5/0x680 [ 97.606737][T13165] __unmap_and_move+0x3f4/0x670 [ 97.611573][T13165] unmap_and_move+0x133/0x800 [ 97.616229][T13165] migrate_pages+0x1ad/0xa30 [ 97.620799][T13165] kernel_mbind+0xe88/0x1010 [ 97.625384][T13165] __x64_sys_mbind+0x74/0x80 [ 97.629964][T13165] do_syscall_64+0x39/0x80 [ 97.634377][T13165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.640251][T13165] [ 97.642572][T13165] read to 0xffff88821b673158 of 8 bytes by task 13165 on cpu 1: [ 97.650183][T13165] page_counter_charge+0x200/0x270 [ 97.655280][T13165] mem_cgroup_migrate+0x74/0x290 [ 97.660208][T13165] migrate_page_states+0x64c/0x730 [ 97.665298][T13165] migrate_page_copy+0x1b2/0x560 [ 97.670217][T13165] migrate_page+0xc2/0xf0 [ 97.674529][T13165] move_to_new_page+0xa5/0x680 [ 97.679277][T13165] __unmap_and_move+0x3f4/0x670 [ 97.684113][T13165] unmap_and_move+0x133/0x800 [ 97.688776][T13165] migrate_pages+0x1ad/0xa30 [ 97.693356][T13165] kernel_mbind+0xe88/0x1010 [ 97.697929][T13165] __x64_sys_mbind+0x74/0x80 [ 97.702497][T13165] do_syscall_64+0x39/0x80 [ 97.706900][T13165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.712770][T13165] [ 97.715076][T13165] Reported by Kernel Concurrency Sanitizer on: [ 97.721213][T13165] CPU: 1 PID: 13165 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 97.729515][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.739551][T13165] ================================================================== [ 97.747597][T13165] Kernel panic - not syncing: panic_on_warn set ... [ 97.754168][T13165] CPU: 1 PID: 13165 Comm: syz-executor.2 Not tainted 5.8.0-syzkaller #0 [ 97.762574][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.772610][T13165] Call Trace: [ 97.775884][T13165] dump_stack+0x10f/0x19d [ 97.780203][T13165] panic+0x207/0x64a [ 97.784089][T13165] ? vprintk_emit+0x44a/0x4f0 [ 97.788758][T13165] kcsan_report+0x684/0x690 [ 97.793251][T13165] ? kcsan_setup_watchpoint+0x41e/0x4a0 11:35:28 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x800000000009031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) msync(&(0x7f000051d000/0x2000)=nil, 0x2000, 0x6) open(0x0, 0x0, 0x0) 11:35:28 executing program 1: ioperm(0x0, 0x3fc, 0xa) rseq(0x0, 0xffffffffffffffe9, 0xffffffffffffffff, 0x0) 11:35:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x130, 0x88020000, 0x340, 0x130, 0x450, 0x220, 0x220, 0x450, 0x220, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x320, 0x340, 0x0, {}, [@common=@unspec=@comment={{0x120, 'comment\x00'}}, @common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bond0\x00', {0x0, 0x0, 0x5a, 0x0, 0x0, 0x81, 0x40}}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 11:35:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x6, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000e7ffffff851000000300000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000095000000000000009500003f000000000000045300094d5e3690e9a652125c3512eda0ba6704cc8cda606cc86a07f964db1b74afaed2946005a7516f35d83bdc9d8a9a3f39d206f4620cb4619b39124d883d35dfefbee97fc2a674f09682e00400f3f4c81b03a7d24fc5d11f61cb"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x2) 11:35:28 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x800000000009031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) msync(&(0x7f000051d000/0x2000)=nil, 0x2000, 0x6) open(0x0, 0x0, 0x0) [ 97.799392][T13165] ? page_counter_charge+0x200/0x270 [ 97.804662][T13165] ? mem_cgroup_migrate+0x74/0x290 [ 97.809757][T13165] ? migrate_page_states+0x64c/0x730 [ 97.815029][T13165] ? migrate_page_copy+0x1b2/0x560 [ 97.820118][T13165] ? migrate_page+0xc2/0xf0 [ 97.824609][T13165] ? move_to_new_page+0xa5/0x680 [ 97.829526][T13165] ? __unmap_and_move+0x3f4/0x670 [ 97.834529][T13165] ? unmap_and_move+0x133/0x800 [ 97.839367][T13165] ? migrate_pages+0x1ad/0xa30 [ 97.844119][T13165] ? kernel_mbind+0xe88/0x1010 [ 97.848894][T13165] ? __x64_sys_mbind+0x74/0x80 [ 97.853643][T13165] ? do_syscall_64+0x39/0x80 [ 97.858223][T13165] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.864293][T13165] kcsan_setup_watchpoint+0x41e/0x4a0 [ 97.869653][T13165] page_counter_charge+0x200/0x270 [ 97.874754][T13165] mem_cgroup_migrate+0x74/0x290 [ 97.879680][T13165] migrate_page_states+0x64c/0x730 [ 97.884770][T13165] migrate_page_copy+0x1b2/0x560 [ 97.889694][T13165] migrate_page+0xc2/0xf0 [ 97.894010][T13165] move_to_new_page+0xa5/0x680 [ 97.898760][T13165] ? try_to_unmap+0x2a1/0x310 [ 97.903508][T13165] ? try_to_unmap+0x310/0x310 [ 97.908338][T13165] ? try_to_unmap_one+0x1790/0x1790 [ 97.913515][T13165] ? page_get_anon_vma+0x120/0x120 [ 97.918607][T13165] __unmap_and_move+0x3f4/0x670 [ 97.923439][T13165] unmap_and_move+0x133/0x800 [ 97.928090][T13165] migrate_pages+0x1ad/0xa30 [ 97.932659][T13165] ? get_nodes+0x270/0x270 [ 97.937051][T13165] kernel_mbind+0xe88/0x1010 [ 97.941616][T13165] ? ktime_get_ts64+0x2d9/0x310 [ 97.946703][T13165] __x64_sys_mbind+0x74/0x80 [ 97.951269][T13165] do_syscall_64+0x39/0x80 [ 97.955664][T13165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 97.961539][T13165] RIP: 0033:0x45ccd9 [ 97.965409][T13165] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 97.984984][T13165] RSP: 002b:00007f194ffaec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 97.993383][T13165] RAX: ffffffffffffffda RBX: 000000000001fb40 RCX: 000000000045ccd9 [ 98.001330][T13165] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020012000 [ 98.009292][T13165] RBP: 000000000078bf58 R08: 0000000000000000 R09: 0000000000000002 [ 98.017236][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 98.025181][T13165] R13: 00007ffdc542792f R14: 00007f194ffaf9c0 R15: 000000000078bf0c [ 98.034547][T13165] Kernel Offset: disabled [ 98.038852][T13165] Rebooting in 86400 seconds..